Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42811FDA80EC11F1B36FF51CCF1D38B0.roa
File: 42811FDA80EC11F1B36FF51CCF1D38B0.roa (raw, json)
Hash identifier: for0Y2ymlXMl8ijaOgKSv09KvAfmLyUElutE91HsUwE=
Subject key identifier: 35:26:4E:2A:19:83:E7:0E:45:99:D8:DB:E6:1E:9C:FF:C8:51:C7:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C549
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42811FDA80EC11F1B36FF51CCF1D38B0.roa
Signing time: Thu 16 Jul 2026 07:59:24 +0000
ROA not before: Thu 16 Jul 2026 07:59:20 +0000
ROA not after: Thu 20 Aug 2026 07:59:20 +0000
asID: 153706
IP address blocks: 156.254.20.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116041 (0x1c549)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 07:59:20 2026 GMT
Not After : Aug 20 07:59:20 2026 GMT
Subject: CN=6a588f5c-d6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e0:76:ce:b5:dd:73:37:62:61:42:31:1f:18:
3b:88:eb:92:23:3d:d3:66:fa:49:36:13:eb:88:98:
fc:46:d5:50:62:81:15:0c:e3:60:ef:29:4d:a9:3e:
b0:4a:ad:ce:ff:55:c3:ef:e9:1e:3f:18:a6:45:7c:
ea:96:4a:2b:02:20:45:61:b5:27:db:4f:02:50:32:
80:86:ed:0c:38:68:48:4a:7a:d5:23:54:4a:e8:c5:
ac:4d:ab:5c:9d:dd:69:fe:f0:61:92:20:d0:8f:98:
7b:68:2e:b1:de:79:63:fa:72:f7:37:df:0a:b9:77:
4f:40:2e:d1:3f:b8:a9:12:a5:c6:29:46:48:13:18:
9f:0d:41:f6:36:07:bd:3d:26:2b:93:ed:3a:54:73:
7e:38:aa:10:c9:ed:f9:cc:65:69:94:57:a2:6e:83:
af:d7:ee:19:47:00:38:12:22:22:ca:1d:c4:14:4e:
81:59:8d:57:c3:c5:c5:69:b6:cb:bd:60:49:d6:83:
d8:a5:17:4a:ea:bb:fb:39:af:90:c3:09:1b:9f:9a:
c8:97:38:b7:03:2e:51:9b:99:44:b3:db:75:6d:1c:
70:64:82:66:15:a1:27:29:d6:6d:5a:50:73:b1:fe:
3c:86:5b:7a:81:23:21:df:a8:51:00:c8:e8:00:59:
06:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:26:4E:2A:19:83:E7:0E:45:99:D8:DB:E6:1E:9C:FF:C8:51:C7:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42811FDA80EC11F1B36FF51CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.20.0/23
Signature Algorithm: sha256WithRSAEncryption
af:39:d9:d0:91:e8:89:da:30:58:43:f7:e1:38:98:56:da:18:
8e:47:95:9f:2a:a7:e7:ac:24:23:b2:ef:22:d4:a9:45:87:06:
39:b4:e6:7c:4c:25:33:67:dc:48:7c:4b:90:82:18:33:5e:30:
40:84:d8:83:36:a6:e1:dd:7f:08:5d:76:9c:46:4b:0d:18:8c:
42:01:c6:ba:9c:f7:ec:94:8b:e6:21:55:73:d0:4b:71:a5:2d:
a9:f7:1c:7e:2d:7b:f9:ed:da:92:10:af:6c:c3:80:be:7f:da:
78:2c:05:ba:48:5e:de:3b:e6:03:63:66:b3:26:16:27:0e:21:
62:52:71:9b:26:3b:be:5b:b0:58:d4:de:b8:4a:a4:98:0b:49:
87:d1:2f:b5:47:58:8b:04:38:02:c8:56:5e:78:1a:09:84:14:
e9:12:0d:67:0e:ac:be:9a:bd:cd:51:14:9e:fd:7b:12:62:dc:
11:08:42:a2:19:b7:1a:f6:21:88:8e:3d:86:34:db:78:47:81:
91:be:4f:dd:76:36:5c:ee:4e:f2:58:ec:df:3b:fe:fc:d8:7f:
8a:41:1b:b0:47:d6:0a:e4:cf:47:f4:de:29:a5:87:79:5e:97:
6f:33:36:4e:94:25:ef:10:91:55:7f:f9:46:b1:89:12:c5:e7:
1b:6b:92:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:43 2026 by rpki-client